Vulnerabilities > Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

DATE CVE VULNERABILITY TITLE RISK
2023-05-29 CVE-2023-30571 Race Condition vulnerability in Libarchive
Libarchive through 3.6.2 can cause directories to have world-writable permissions.
local
high complexity
libarchive CWE-362
5.3
2023-05-18 CVE-2023-33203 Race Condition vulnerability in multiple products
The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/net/ethernet/qualcomm/emac/emac.c if a physically proximate attacker unplugs an emac based device.
high complexity
linux redhat CWE-362
6.4
2023-05-10 CVE-2023-32570 Race Condition vulnerability in multiple products
VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit.
network
high complexity
videolan fedoraproject CWE-362
5.9
2023-05-09 CVE-2023-28125 Race Condition vulnerability in Ivanti Avalanche
An improper authentication vulnerability exists in Avalanche Premise versions 6.3.x and below that could allow an attacker to gain access to the server by registering to receive messages from the server and perform an authentication bypass.
network
high complexity
ivanti CWE-362
5.9
2023-05-09 CVE-2023-28126 Race Condition vulnerability in Ivanti Avalanche
An authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to gain access by exploiting the SetUser method or can exploit the Race Condition in the authentication message.
network
high complexity
ivanti CWE-362
5.9
2023-05-08 CVE-2023-27952 Race Condition vulnerability in Apple Macos
A race condition was addressed with improved locking.
local
high complexity
apple CWE-362
4.7
2023-04-24 CVE-2023-2006 Race Condition vulnerability in multiple products
A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles.
local
high complexity
linux netapp CWE-362
7.0
2023-04-18 CVE-2023-28142 Race Condition vulnerability in Qualys Cloud Agent 3.1.3.34
A Race Condition exists in the Qualys Cloud Agent for Windows platform in versions from 3.1.3.34 and before 4.5.3.1.
local
high complexity
qualys CWE-362
7.0
2023-04-14 CVE-2023-26980 Race Condition vulnerability in PAX Paydroid 8.1
PAX Technology PAX A920 Pro PayDroid 8.1suffers from a Race Condition vulnerability, which allows attackers to bypass the payment software and force the OS to boot directly to Android during the boot process.
local
high complexity
pax CWE-362
7.0
2023-04-14 CVE-2023-1285 Race Condition vulnerability in Mitsubishielectric Gc-Enet-Com Firmware
Signal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit serial number of unit are "16" allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition in Ethernet communication by sending a large number of specially crafted packets to any UDP port when GC-ENET-COM is configured as a Modbus TCP Server.
network
high complexity
mitsubishielectric CWE-362
5.9